Background:

eu-LISA is the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA) manages large-scale IT systems to support the implementation of asylum, border management and migration policies in the European Union (EU). The Agency is also a front-runner for the digitalisation efforts of the EU's Justice and Home Affairs domain, building a new information architecture and contributing to the development of a new security ecosystem. Since the Agency's beginnings in 2012, eu-LISA has become the digital engine of the Schengen Area. With its activities and tasks, the Agency adds value to the EU Member States by supporting their efforts towards justice, security and freedom.

Task description:         

• Supports the Agency's Information Security Officers in the management of information security and business continuity across organizational business processes and information systems
• Develop security controls in the context of the agency's information security framework.
• Expected also to perform the following tasks:
• Perform risk assessments
• Develop Information Security Management System (ISMS) procedures
• Develop conceptual, logical and physical security models as appropriate.
• Draft security policies, standards, procedures and guidelines in accordance with ISO27001
• Development of security plans and documentation (e.g. risk treatment plans, security test plans)
• Development of business continuity and disaster recovery plans.
• Perform security assessments and audits
• Perform ISMS control audits
• Perform ISMS gap assessments
• Design security controls in accordance with agency information security policies and standards
• Provide assistance in formal accreditation process for information systems handling EU sensitive and classified information.

Education:      

• Minimum 4 years of relevant education (master or equivalent) after the secondary school

Minimum Experience:

• Minimum 6 years of general IT professional experience, of which
• Minimum 3 years of relevant professional experience in Information Security Management

Additional needed qualification, knowledge and skills:         

• Good knowledge of/in:
• ISO27001 implementation and management.
• Relevant standards and good practice in information security management
• Information risk management (in particular E-BIOS)
• Governance, Risk & Compliance (GRC) practices and controls
• ISO27001 security control audits and assessments
• Developing security policies, standards and guidelines in accordance with ISO27001 and EU security policies and standards
• Design, implementation and assessments of good practice security control frameworks such as SANS Top 20 Critical Controls, OWASP Application Security Verification Standard,
• Secure development processes (Security and Privacy design)
• Implementation of EU data protection principles in information system design and processes.
• This profile is expected to possess one or more of the following qualifications:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• ITIL/ITIL V3
• BSI ISO27001 Lead Auditor Qualification

The Team You'll Join

You'll be part of our Security team within the GRC (Governance, Risk & Compliance) pillar, led by Maxime Lahaye, Senior Security Officer, based in Paris. Together, you'll be ensuring Mirakl's adherence to security standards and regulations while shaping the future of compliance in an AI-driven world.

AI is fundamentally transforming how we work, and you'll join an established team that's at the forefront of this evolution. This is your opportunity to participate in building the GRC infrastructure of tomorrow—where automation, intelligence, and security converge to enable Mirakl's next phase of growth.

Location: Paris (1 day remote per week)

Your Impact

1 · Compliance & certifications — automated

• Contribute to driving and maintaining Mirakl's ISO 27001, ISO 27018, and SOC 2 certifications, leveraging automated GRC platforms to enable continuous compliance monitoring and reduce manual effort
• Help manage and evolve the ISMS (Information Security Management System), ensuring it reflects both regulatory requirements and Mirakl's evolving AI-driven operations
• Automate evidence collection, control monitoring, and documentation workflows using modern GRC tooling and AI-powered agents

2 · AI Governance — to build with the team

• Working closely with your manager and the Security team, co-design and evolve Mirakl's AI usage governance framework: acceptable use policies, data classification for AI inputs, shadow AI detection, and AI vendor risk assessment
• Maintain a live inventory of AI tools used across the company and contribute to the risk-based process for evaluating and onboarding new tools
• Participate in internal awareness and training initiatives on responsible AI use across all departments
• Monitor the AI governance regulatory landscape and help adapt Mirakl's framework proactively

3 · Security by design across all company projects

• Partner with Product and Engineering teams early in project lifecycles — whether AI-powered or not — to embed security and compliance requirements from the start
• Participate in risk reviews across all types of product and platform initiatives, with specific attention to AI-related threat vectors where applicable (prompt injection, data leakage in LLMs, access control for models)

What You'll Bring to the Role

Experience:

• Master's degree (Bac +5)
• Minimum 3 years of experience in GRC security
• Experience in a consulting firm, technology company, or equivalent role is a plus
• Strong understanding of compliance frameworks and security standards
• Scripting/developing experience

Skills:

• Proactive and autonomous with strong organizational and problem-solving abilities
• Excellent communication and pedagogy skills to influence technical and non-technical stakeholders
• Integrity and ethics as core values
• Ability to work collaboratively in extended teams
• Experience with web application and cloud (SaaS) security, as well as professional certifications (CISM, CISSP, ISO), are a plus.

Tools Used

• Drata
• AWS, GCP
• N8N
• Python
• Office Suite / Google Workspace

Languages

• Fluent in French and conversational English

Our Hiring Process

1. 30-45 minute call with a Talent Acquisition Specialist
2. 1-hour technical interview with the hiring manager
3. Two 45-minute values interviews using the STAR methodology

The STAR method and structured interviews will hold no secrets for you.

Notre équipe Value Chain Engineering recherche un·e Software Integration Engineer basé·e à Lille.

Au cœur de la performance globale de Decathlon, notre équipe opère les infrastructures critiques et les flux de données (SAP & non-SAP) qui font bouger nos produits. Riche de 60 passionné·es, notre collectif se structure par pôles d’expertise avec un ratio de proximité fort (1 manager pour 8 collaborateur·ices). Notre défi ? Allier excellence opérationnelle dans le "run", accompagnement métier agile et épanouissement des talents. Suite à une promotion interne, nous cherchons un·e leader pour écrire le prochain chapitre de notre équipe "Autorisations & Orchestration SAP".

TA FUTURE CONTRIBUTION 🚀

En tant que Software Integration Engineer SAP Autorisation  tu es le·la garant·e de l’équilibre entre agilité technique et la gestion de projet majeure de l’équipe. Tes missions s'articulent autour de trois piliers :

• Vision & Roadmap : Co-construire avec tes collaborateur·ices la feuille de route pour moderniser nos produits et préparer l’avenir des autorisation SAP avec les parties prenantes. Tu intègres les enjeux business tout en pilotant deux OKR ambitieux : atteindre une maturité de 8/10 sur la gestion des autorisations d'ici 2026 et assurer l’alignement des roadmaps avec la fin de vie et renouvellement des module autorisation SAP.
• Gestion de projet Autorisation :  
• Piloter des projets transverses entre les équipes cybersécurité, les développeurs et le métier.
• Garantir des intégrations sécurisées et performantes à grande échelle en respectant les normes et standards SAP.
• Accompagner les équipes avec pédagogie dans l'adoption de ces standards.
• Qualité & Résilience : Garantir la disponibilité, la sécurité et la performance des outils. Tu insuffles une culture de l’amélioration continue et de l'excellence opérationnelle (SRE).

STACK TECHNIQUE 🛠️

Tu évolueras dans un environnement robuste et varié :

• SAP : Autorisations (GRC), SAP Basis, Identity Access, NWBC, SLS, Automic (Application critique sur les chaines de la value Chain Decathlon ) .
• Tools : Archivage (OpenText), Monitoring (Splunk), Scheduling (Automic).

CE QUE TU APPORTES 🌟

• Ton Expérience : Issu·e d'une formation supérieure en informatique, tu justifies d'au moins 2 ans d'expérience sur un poste similaire.
• Ton Expertise : Tu possèdes une forte appétence pour l'écosystème SAP et la recherche de solutions performantes. La culture AGILE et les principes SRE ne te sont pas inconnus.
• Tes Soft Skills : Organisé·e et curieux·se, tu es reconnu·e pour ton sens du service et ton audace dans la prise d'initiatives.
• Ton Ouverture : Dans notre réseau mondial, l'anglais est ta seconde langue de travail pour collaborer quotidiennement avec nos partenaires internationaux.

CE QUE NOUS T’OFFRONS 🎁

• Flexibilité : Organisation de travail hybride (2 jours de télétravail par semaine) ;
• Cadre de travail : Bureaux basés à Lille, matériel au choix (Mac, Windows ou Chromebook) en accord avec nos engagements sociétaux ;
• Carrière : Un environnement international offrant de réelles perspectives d'évolution et un plan de formation personnalisé (certifications dès la 1ère année) ;

Avantages : Package complet (participation, prime de performance mensuelle/trimestrielle) et la carte ambassadeur Decathlon pour vivre ta passion du sport au quotidien.

Position Overview: 

The Account Director is responsible for driving revenue growth for existing and new accounts for all products. The Account Director is a key decision maker with responsibility for larger, complex accounts with longer sales cycles. As a key member of the team, success in this position is measured by increasing the products used by existing customers, moving existing customers to the Diligent One platform and selling the Diligent One Platform to new customers.

This individual contributor position is responsible for initial prospect/customer meetings, pipeline management and accurate forecasting through to deal completion. The Account Director leads the strategic execution of account plans and orchestrates internal expertise to deliver on and grow accounts. Providing coaching, guidance and support to Sales stakeholders is a key element of this position to enable team members to learn best practices. 

This position requires a commercially astute individual with a proven track record of success in new business sales. The Account Director embodies our culture and values and has demonstrated experience collaborating with stakeholders to realize shared goals.

Key Responsibilities

• Proactively builds and maintains deep knowledge and expertise of Diligent’s products, solutions, strategy and business priorities.
• Responsible for prospecting new and existing business within the designated vertical / territory for larger, complex accounts with longer sales cycles.
• Adopts a ‘solutions’ selling approach, understanding customer needs and developing solutions through the lens of the Diligent One Platform.
• Leverages unique, strategic, industry-focused business insights and opportunities to create long-term, competitive advantage for the customer.
• Expands strategic customer relationships to drive larger impact for the customer to promote growth into other areas of the organization.
• Proactively gathers feedback on additional needs, products, and features from customers, collaborating with product management and product marketing to drive change on behalf of the customer.
• Develops strategic business/account plans for customers that drive business outcomes to generate new business and upsells. Leads and coordinates a cross functional team on plan execution and drives accountability to execute and deliver on account plans.
• Effectively manage the end-to-end sales cycle from opportunity to deal close using the Diligent approved sales methodology. 
• Effectively utilize sales tools to prospect new leads, schedule initial meetings, increase win rates and generate bookings.
• Accurately maintain SFDC records, forecast and report out on projected bookings, deals closed etc. on a regular basis.
• Demonstrates deep expertise and understanding of the competitor landscape externally, including customers’ business strategy and the direction of the industry

Required Experience/Skills:.

• 7-10 years proven track record of success in account management and achieving revenue targets within industry vertical technology or GRC industry.
• Strong communication and presentation skills in English and French essential.
• Ability to build and maintain relationships with Senior leaders and stakeholders at different levels of the organization. • Continuous learning, including proven knowledge and expertise of internal products and external industry trends and customer landscape.
• Demonstrated strategic thinking and ability to align technology solutions with business objectives.
• Self-motivated, results-driven, and ability to work in a fast-paced and dynamic environment.

Senior Security Analyst - GRC

(Massy - France)

Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.

COMPANY OVERVIEW

At Ivalua we are a global community of exceptional professionals, who believe that digital transformation revolutionizes supply chain sustainability and resiliency to unlock the power of supplier collaboration. We achieve this through our leading cloud-based spend management platform that empowers hundreds of the world's most admired brands to effectively manage all categories of spend and all suppliers to increase profitability, improve ESG (environmental, social, and corporate governance) performance, lower risk, and improve productivity. Driven by our passions and fueled by our shared ambitions, we empower and challenge each other to create meaningful experiences for our colleagues, customers, partners, and communities. 

Learn more at www.ivalua.com. Follow us on LinkedIn 

THE OPPORTUNITY

CONTEXT:

You will be part of the InfoSec team with a mission to build, maintain, and continuously improve our Information Security program, providing peace of mind and assurance of protection and safety to our customers. Our team is hands-on, with a strong problem-solving mindset, capable of thinking holistically about implementation and providing solutions to address our customers' long-term challenges. We work hard and play hard, enjoying various indoor and outdoor activities organized by the company, allowing you to focus, collaborate, and unleash your creativity.

ROLE: 

We are looking for a Senior Security Analyst to join our InfoSec team. This role will help drive various GRC activities which include supporting prospect and customer security questions, maintaining security policies, supporting security audits and assessments and driving new security certifications/compliance initiatives. 

WHAT YOU WILL DO WITH US 

• Lead and support compliance initiatives across global and regional frameworks including SOC 1/SOC 2, ISO 27001, IRAP, PCI-DSS, SecNumCloud, Cyber Essentials Plus (CE+), BSI C5, NIST 800-53
• Evaluate technical controls across the technology stack, including all layers of the TCP/IP model (e.g. network segmentation, firewall rulesets, TLS/SSL configuration, IDS/IPS, access controls, application security, encryption in transit/at rest, cloud security configurations), and translate security requirements into actionable guidance for engineering and infrastructure teams.
• Drive and manage customer security audits, security questionnaires, and contract reviews with a primary focus on the EMEA region. Participate in the negotiation and review of French contracts to ensure alignment with security and compliance obligations.
• Attend prospect and customer meetings and effectively present Ivalua’s security architecture and control information to them. 
• Lead or support internal and third party security risk management processes, including risk identification, analysis, scoring, treatment planning, and ongoing monitoring. 
• Support continuous compliance monitoring activities using manual and automation and GRC tooling to maintain control effectiveness, generate evidence, and ensure audit readiness.
• Own execution and coordination of key security and availability controls such as Business Impact Analysis (BIA), Disaster Recovery testing, security incident response exercises, access reviews, etc. 

YOUR PROFILE

If you have the below experience and strengths this role could be for you:

Skills and Experience:

• At least 4 years of experience as Security Analyst GRC 
• Strong working knowledge of security, risk, and compliance frameworks (e.g. NIST CSF & 800-53, ISO 27001, SOC, HITRUST, HIPAA, PCI-DSS, GDPR)
• Direct experience managing audits, self-assessments, or risk assessments against one or more InfoSec frameworks listed above
• Experience performing or supporting security risk management processes (risk assessments, risk registers, business impact analysis)
• Familiarity with continuous compliance and monitoring platforms
• Good understanding of cloud platforms (Azure, AWS, GCP) and ability to discuss security architecture and control implementation with technical teams
• Knowledge and experience working with IT and security personnel as well as security concepts across all layers of technology (network, infrastructure, web applications, cloud environments)
• Knowledge of risk and security industry literature and knowledge bases (e.g. OWASP, MITRE ATT&CK, NIST 800-39)
• Relevant audit and/or Information Security certifications (e.g. CISSP, CISA, CISM, Azure Cloud Security) are desired
• Prior experience at a Big 4 firm or in a security/compliance function in a cloud/SaaS environment is a plus 

Soft Skills:

• Excellent interpersonal, communication, and organizational skills. Ability to communicate efficiently and professionally in both French and English, including in contractual, regulatory, and technical contexts
• Demonstrated ability to work across geographically distributed teams and with external vendors, auditors, or regulators.
• Strong organizational skills and attention to detail; able to manage multiple competing priorities in a fast-paced environment
• High degree of initiative, self-motivation, and ability to work independently with limited supervision

WHAT HAPPENS NEXT

If your application fits this specific position’s needs, our skilled Talent team will reach out to schedule an initial screening call. Get one step closer to achieving your goals – apply today! 

Our Talent team will guide you through every step of the interview process - from preparation to completion. They're here to support you! 

Our recruitment process is designed to assess your competencies through a series of personalized interviews with internal stakeholders relevant to the role. 

Interviews will be conducted virtually via video or on-site with face-to-face meetings.

LIFE AT IVALUA

• Hybrid working model (3 days in the office per week)
• We're a team dedicated to pushing the boundaries of product innovation and technology
• Sustainable Growth, Privately Held
• A stable and cash-flow positive Company since 10 years
• Snacks and weekly lunches in the office
• Feel empowered to pursue your goals with improved team collaboration and increased creativity/productivity
• Unlock and unleash your full professional potential with our exceptional training and career development program
• Join a dynamic and international team of top-notch professionals who are experts in their respective fields
• Collaborate with like-minded individuals who are deeply passionate and highly motivated about their work
• Experience a truly diverse and inclusive work environment where your unique contributions are highly valued
• Regular social events, competitive outings, team running events, and musical activities
• Comparably recognized Ivalua for the following (https://www.comparably.com/companies/ivalua): 

Powered by People - Powered by You!

United by our values we embrace diversity and equity in the broadest possible sense to create an inclusive workplace. To help our customers make supply chains more efficient, sustainable and resilient, we rely on a global team with a variety of backgrounds, skills and views. We believe in equal opportunity and in diversity as a driver of innovation that cultivates a spirit of inclusiveness, creates a productive and fun place to work, and provides fulfilling career opportunities for all Ivaluans. https://www.linkedin.com/company/ivalua/about/

Experience life at Ivalua - check out our captivating video! Gain insight into our unique company culture and get a glimpse of what it's like to work with us.

#LI-MV1

#LI-HYBRID